Testing Methods for Integrating Data Leak Prevention (DLP) Systems and Information Security Event Management (Siem) Systems

The thesis examines the possibilities of automated collection and analysis of information security events related to information processing in corporate information systems and countering information leaks, as well as their integration with events from other security features and information systems. For automatic collection of information on data processing and leak detection in the organization’s information infrastructure, information leak prevention systems - DLP - are used. For automated processing of these information security events, there is a class of information security event management systems - SIEM, whose functions include data collection and processing, normalization, enrichment, and correlation of the received events analysis in accordance with the established correlation rules to identify information security incidents. The thesis contains 81 pages, 15 figures, 3 tables, 27 sources.